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Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timety filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after t he mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)^ Responsive to communication(s) filed on 19 March 2004 . 
2a)D This action is FINAL. 2b)E3 This action is non-final. 

3) Q Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) E] Claim(s) 1-32 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) Q Claim(s) is/are allowed. 

6) S Claim(s) 1-32 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)S The drawing(s) filed on 19 March 2004 is/are: a)EI accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
1 !)□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-1 52. 

Priority under 35 U.S.C. § 119 

12)S Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
aM AH b)D Some * c)D None of: 

1 Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . The Information Disclosure Statements filed on 6/1 7/04, 1 1 /1 9/04, and 8/7/06 
have been considered by the examiner. 

2. Claims 1-32 are pending in this application. 

3. Below, Examiner has pointed out particular references contained in the prior 
art(s) of record in the body of this action for the convenience of the applicant. Although 
the specified citations are representative of the teachings in the art and are applied to 
the specific limitations within the individual claims, other passages and figures may 
apply as well. Applicant should consider the entire prior art as applicable as to the 
limitations of the claims. It is respectfully requested from the applicant, in preparing the 
response, to consider fully each reference in its entirety as potentially teaching all or 
part of the claimed invention, as well as the context of the passage as taught by the 
prior arts or disclosed by the examiner. 

Claim Rejections - 35 USC §112 

1 . The following is a quotation of the second paragraph of 35 U.S. C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 
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2. The term "range of validity" in Claim 23- line 3 is a relative term that renders the 
claim indefinite. The term "range of validity" is not defined by the claim, the 
specification does not provide a standard for ascertaining the requisite degree, and one 
of ordinary skill in the art would not be reasonably apprised of the scope of the 
invention. Although the specification defines the "range of validity" as that it can only be 
used only in the predetermined domain, or that it can be used only by the 
predetermined system or the predetermined server ([0158], [0215] from US 
2004/0187009). It is unclear from the claim how this range is determined or defined. 

Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U. S C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

2. Claims 1-19, 24, 25, 27-32 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Gennaro et al. (US 6,317,834), hereafter "Gennaro". 

3. Considering Claims 1, 7 and 10, Gennaro discloses an information providing 
device (abstract) comprising: a provider association unit making a plurality of 
information providers (Fig. 4B- item 28, item 30, item 32), including first and 
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second information providers (Fig. 4B- item 30 and item 32), be associated with 
each other (Fig. 4B- item 42), the plurality of information providers providing 
respective user information items (column 7- lines 16-39), the provider 
association unit comprising: a first unit causing the first information provider to 
receive a first user information item (Fig. 6- item 74, item 82, column 8- lines 9- 
24), stored in a first information management unit (Fig. 4A, column 6- lines 4-8), 
in response to a user information receiving request (column 7- lines 8-9); a 
second unit causing the second information provider to receive a second user 
information item (Fig. 6- item 90, column 7- lines 34-37), correlated with the first 
user information item and stored in a second information management unit (Fig. 
3, column 5- lines 46-54), in response to a predetermined identification data 
(column 8- lines 24-32); and a third unit outputting a unified information item 
which is created by combining the first user information item and the second user 
information item based on the predetermined identification data (column 8- lines 
37-47). 



4. Considering Claims 12, 24, 25, 27, and 31, Gennaro discloses a user 

authentication device (abstract) comprising: a provider association unit which 
makes a plurality of authentication providers (Fig. 4B- item 28, item 30, item 32), 
including first and second authentication providers (Fig. 4B- item 30 and item 32), 
be associated with each other (Fig. 4B- item 42), the provider association unit 
comprising: a first unit causing the first authentication provider to perform, in 



Application/Control Number: 10/803,896 Page 5 

Art Unit: 2135 

response to a first authentication request, a first user authentication based on a 
first user identification data that is specified in the first authentication request 
(column 8- lines 9-32, Fig. 6); and a second unit causing the second 
authentication provider to perform, in response to a second authentication 
request related to a user approved by the first user authentication, a second user 
authentication based on a second user identification data that is correlated with 
the first user identification data (column 8- lines 32-47, Fig. 6). 

5. Considering Claims 2, 8, and 11, Gennaro discloses the user information 
receiving request contains retrieval conditions specified therein, and the provider 
association unit causes the first and second information providers to respectively 
receive the first and second user information items that satisfy the retrieval 
conditions (Fig. 4B, column 7- lines 8-21). 

6. Considering Claims 3 and 9, Gennaro discloses the provider association unit is 
provided to unify the information items received by the first and second 
information providers for every user (column 8- lines 37-47, Fig. 4B- item 42). 

7. Considering Claims 4 and 13, Gennaro discloses the user authentication device 
further comprises the first authentication provider and the second authentication 
provider (Fig. 3, Fig 4B). 
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8. Considering Claims 5, 16, and 29, Gennaro discloses the user authentication 
device further comprises: a first-authentication-provider information management 
unit managing a first-authentication-provider identification data which identifies 
the first authentication provider from among the plurality of authentication 
providers (Fig. 3- item 330, column 7- lines 7-12); and a second-authentication- 
provider information management unit managing a second-authentication- 
provider identification data which identifies the second authentication provider 
from among the plurality of authentication providers (Fig. 3- item 330, column 7- 
lines 35-45). 

9. Considering Claims 6, 17, and 30, Gennaro discloses the user authentication 
device further comprises a call information management unit in which a plurality 
of call information items used to call the plurality of authentication providers 
respectively are recorded (Fig. 3- item 340), and the provider association unit 
causes the first and second authentication providers to perform the first and 
second user authentications respectively by calling the first and second 
authentication providers based on the call information management unit (column 
5- lines 17-38). 

10. Considering Claims 14, 15, 28, and 32, Gennaro discloses the provider 
association unit further comprises a user-identification management unit in which 
the first user identification data and the second user identification data are 
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correlated to each other and recorded (Fig. 3- item 330), and the provider 
association unit is provided to search for the second user identification data in 
the user-identification management unit based on the first user identification data 
(column 5- lines 17-23, column 7- lines 7-21). 

1 1 . Considering Claim 18, Gennaro discloses the first authentication provider 
creates a first electronic ticket which certifies approval of the user by the first 
authentication provider (column 7- lines 17-37), the second authentication 
provider creates a second electronic ticket which certifies approval of the user by 
the second authentication provider (column 7- lines 37-50), and the user 
authentication device provides information containing the first electronic ticket 
(column 7- lines 17-37), in response to the first authentication request and 
provides information containing the second electronic ticket, in response to the 
second authentication request (column 7- lines 37-50). 



12. Considering Claim 19, Gennaro discloses the provider association unit creates a 
merge ticket in which the first electronic ticket and the second electronic ticket 
are unified (Fig. 6- item 92 and item 94), and the user authentication device 
provides a first merge ticket in which the first electronic ticket is unified (Fig. 6- 
item 84), in response to the first authentication request (Fig. 6- item 82), and 
provides a second merge ticket in which the second electronic ticket is unified 
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further (Fig. 6- item 92), in response to the second authentication request (Fig. 6- 
item 90). 

Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 20-23 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Gennaro in view of Shigematsu et al. (US 2002/0095588), hereafter "Shigematsu". 

3. Considering Claims 20-23, Gennaro does not explicitly disclose the user 
authentication device provides the merge ticket which is encoded, contains a 
term of validity, contains a code for ticket falsification check, contains a range of 
validity. Gennaro does disclose a statistical equivalence score is generated from 
the comparison (column 8- lines 37-40) 



Shigematsu discloses the merge ticket which is encoded, contains a term of 
validity, contains a code for ticket falsification check, contains a range of validity 
([0117], [0298]). 
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Therefore, it would have been obvious to one of ordinary skill in the art at 
the time the invention was made to modify the teachings of Gennaro by as taught 
by Shigematsu in order to prevent any illicit use of the service and correctly 
authenticate a user (Shigematsu- [0011]). 

4. Claim 26 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Gennaro. 

5. Considering Claim 26, Gennaro does not explicitly disclose the provider 
association unit is provided with a call function using a remote procedure call of 
SOAP. 

Gennaro is silent on an exact protocol used to generate call function. SOAP is a 
widely recognized protocol for exchanging messages over multiple computers. 
Therefore, it would have been obvious to one of ordinary skill in the art at the 
time of the invention to modify the teachings of Gennaro to provide remote 
procedure calls using SOAP as was widely known in the art for the benefit of 
facilitating communication between computers while allowing the use of multiple 
transport protocols such as HTTP, TCP, and SNMP. 
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Conclusion 

1 . The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

• US 5,535,276 - Method for secure communications. 

• US 5,671 ,354 - User Authentication. 

• US 2003/01 77392 - First and Second User Authentication. 

• US 6,71 5,082 - Security Server Token Caching. 

• US 2001 /0052082 - Two-Factor Authentication. 

2. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Randal D. Moran whose telephone number is 571-270- 
1255. The examiner can normally be reached on M-F: 7:00 - 4:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Randal D. Moran 
/RDM/ 
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6/11/07 



